Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/0/323830343a6230343a383030303a3a2f33332d3333203d3e203532393334.roa
File:                     323830343a6230343a383030303a3a2f33332d3333203d3e203532393334.roa (raw, json)
Hash identifier:          rHq8qlAC1dmWxMa4Ur6voJ3MseKnAwAHUgT+ylzVoz4=
Subject key identifier:   98:18:CD:21:8F:EF:AA:1E:0A:3A:E5:78:7D:B9:DE:D7:F0:78:50:87
Certificate issuer:       /CN=30F0D45FA9008838BBF85083E8E9A8155A602D9E
Certificate serial:       1DC04534D22673F6AD08DE0FD1EBE5FFC5BBFBFA
Authority key identifier: 30:F0:D4:5F:A9:00:88:38:BB:F8:50:83:E8:E9:A8:15:5A:60:2D:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30F0D45FA9008838BBF85083E8E9A8155A602D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/0/323830343a6230343a383030303a3a2f33332d3333203d3e203532393334.roa
Signing time:             Fri 09 Jun 2023 15:00:00 +0000
ROA not before:           Fri 09 Jun 2023 14:55:00 +0000
ROA not after:            Fri 07 Jun 2024 15:00:00 +0000
asID:                     52934
IP address blocks:        2804:b04:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c0:45:34:d2:26:73:f6:ad:08:de:0f:d1:eb:e5:ff:c5:bb:fb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30F0D45FA9008838BBF85083E8E9A8155A602D9E
        Validity
            Not Before: Jun  9 14:55:00 2023 GMT
            Not After : Jun  7 15:00:00 2024 GMT
        Subject: CN=3082010A0282010100B2B2441D61B0B755463BB3227E71AD878F330032494BBBF455418F1E4C7EC3028E9D931C6528113BD5B90541EEDAA4D48C406C72284108FD9B9F6DD3541DE2FB31265A52A836D7DDA44275B982BD91C4BC88E3854A2035621D6DF6A9A6A3358890B3CA3307FB765095D2A47CDB4038EBAF0FA1D6AA4A0FD386CE3BAB89BE35FA9D5EFDBD4CF50595EEC6D9DF720C9317356D8827FB27D56419D1949856EE82A2AC855E45C6172D7A48902DB8353A5578758580757E48E2CBE7B6FF87B055A7EE2D7BE59385F2BD88164B726A3ED8D9F07480D34D310EA2850D19CC467FD713EE4A9AF6D5434669FABFD31CA6747269AE2FEDEE8D02ABBF73E628081C78A1B9750203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:44:1d:61:b0:b7:55:46:3b:b3:22:7e:71:
                    ad:87:8f:33:00:32:49:4b:bb:f4:55:41:8f:1e:4c:
                    7e:c3:02:8e:9d:93:1c:65:28:11:3b:d5:b9:05:41:
                    ee:da:a4:d4:8c:40:6c:72:28:41:08:fd:9b:9f:6d:
                    d3:54:1d:e2:fb:31:26:5a:52:a8:36:d7:dd:a4:42:
                    75:b9:82:bd:91:c4:bc:88:e3:85:4a:20:35:62:1d:
                    6d:f6:a9:a6:a3:35:88:90:b3:ca:33:07:fb:76:50:
                    95:d2:a4:7c:db:40:38:eb:af:0f:a1:d6:aa:4a:0f:
                    d3:86:ce:3b:ab:89:be:35:fa:9d:5e:fd:bd:4c:f5:
                    05:95:ee:c6:d9:df:72:0c:93:17:35:6d:88:27:fb:
                    27:d5:64:19:d1:94:98:56:ee:82:a2:ac:85:5e:45:
                    c6:17:2d:7a:48:90:2d:b8:35:3a:55:78:75:85:80:
                    75:7e:48:e2:cb:e7:b6:ff:87:b0:55:a7:ee:2d:7b:
                    e5:93:85:f2:bd:88:16:4b:72:6a:3e:d8:d9:f0:74:
                    80:d3:4d:31:0e:a2:85:0d:19:cc:46:7f:d7:13:ee:
                    4a:9a:f6:d5:43:46:69:fa:bf:d3:1c:a6:74:72:69:
                    ae:2f:ed:ee:8d:02:ab:bf:73:e6:28:08:1c:78:a1:
                    b9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:18:CD:21:8F:EF:AA:1E:0A:3A:E5:78:7D:B9:DE:D7:F0:78:50:87
            X509v3 Authority Key Identifier:
                keyid:30:F0:D4:5F:A9:00:88:38:BB:F8:50:83:E8:E9:A8:15:5A:60:2D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/0/30F0D45FA9008838BBF85083E8E9A8155A602D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30F0D45FA9008838BBF85083E8E9A8155A602D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/0/323830343a6230343a383030303a3a2f33332d3333203d3e203532393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b04:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:b3:eb:fb:85:63:58:68:c0:f4:f9:f6:ad:56:d3:13:6b:c9:
         31:e4:30:83:8e:bc:66:af:3f:ec:f0:ab:72:7c:29:a4:65:6e:
         05:86:0a:61:88:e8:a3:32:3c:7d:bd:0d:39:d5:24:c3:2a:e1:
         aa:8d:dc:41:6e:e5:64:a7:e4:7c:ae:e4:b5:6b:d3:0f:de:1e:
         82:64:4e:3c:49:72:ba:50:9a:73:96:37:31:55:c4:3c:ba:e8:
         1b:d9:ef:52:4b:66:b5:38:bf:46:d3:71:ed:64:7f:1f:c3:34:
         1c:b8:b4:f0:73:d1:46:00:7f:be:a6:da:2e:d7:df:f4:0e:70:
         3d:ac:ea:75:67:e0:bd:de:74:23:5e:44:1e:10:64:7d:cf:1d:
         8e:6c:40:80:35:fa:75:b3:8a:78:36:d8:f6:82:6c:af:c6:0b:
         ea:60:a4:11:ac:80:e9:2b:1d:bf:42:79:11:b1:68:8f:62:56:
         f5:99:96:39:72:1c:c2:42:2f:20:d5:67:93:ff:ea:20:00:2f:
         0f:f2:90:6f:40:da:cc:cd:40:59:3d:8f:51:8a:ce:14:75:90:
         51:dc:7b:a8:d5:fc:a3:4f:e7:ce:19:a4:27:24:ce:b4:74:f4:
         98:31:c9:0a:ee:99:77:48:60:e8:80:a5:8e:e6:15:d9:fa:a2:
         84:2d:7a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org